7 Replies Latest reply on Feb 11, 2013 2:40 AM by Raj NameToUpdate

    NSH Patch in property value

      Hi,

       

      I want to add Antivirus Path in property value but unable to execuate compliance rule for that , guessing not able to find out the correct path settings for C:\Program Files (86)?? value

       

      I am able to test for C:\program files\ path..

      Please see the below screen shot and suggest how to keep path for antivirus location property for x64 program files??

       

      AV_location.png

        • 1. Re: NSH Patch in property value
          Joe Piotrowski

          Raj, based on your other post (https://communities.bmc.com/communities/thread/77508?tstart=0) I'm worried that you are creating Compliance in a way that is not going to be beneficial for you. So before I dig into this discussion I would like to know (big picture) what you're trying to accomplish. Are you simply trying to determine if Symantec Antivirus is installed on your servers?

          • 2. Re: NSH Patch in property value

            Hi Joe,

             

            My Senario is like that...

             

            1. Rule will Check if Any Anti Virus is present or not.

            2. If yes then Symantec Endpoint should match.

            3. If should match the versions listed in the property.

            4. If is windows 2k & 2k3 x86 then endpoint location should be this <>.

            5. Else if Windows 2k3 and 2k8 64 bits then antivirus location should be something else.

             

             

            I have acheived so far till rule 1-3 and trying to acheive rule 4-5, and not sure if i should create two separate rules or a consolidated one..

             

            Please let me know if my query / approach is not correct??

             

            Thanks

            Raj

            • 3. Re: NSH Patch in property value
              Joe Piotrowski

              At a higher level, what are you trying to accomplish? My assumption is you are trying to determine if the server has antivirus software installed and what version is it. Is that correct? If so why does it matter where it's installed? Is that important?

               

              I'm also assuming that there are probably only one or two possible antivirus companies you would have installed in your environment.

               

              So I would think that just creating a Compliance Rule similar to this would work. Let's say I wanted to check to see if Symantec Endpoint Protection was installed and it was version 12.1 or higher. I would add the Symantec Endpoint Protection part and do something like this:

              "Windows Applications: Symantec Endpoint Protection" exists AND

              "Windows Applications: Symantec Endpoint Protection"."Version (Windows)" starts with 12.1

              • 4. Re: NSH Patch in property value
                Joe Piotrowski

                You can also use an Exists Loop. Something like:

                 

                exists "Windows Application:*" where

                     Name contains "Symantec Endpoint Protection" AND

                     "Version (Windows)" starts with "12.1"

                end

                 

                That will cycle through all the Applications and check those conditions against each. You can check for other software by adding ( ) and an ADD/OR condition.

                 

                exists "Windows Application:*" where

                     ( Name contains "Symantec Endpoint Protection" AND

                     "Version (Windows)" starts with "12.1"

                     ) OR

                     ( Name contains "McAfee Agent" AND

                     "Version (Windows)" starts with "4.6"

                     )

                end

                • 5. Re: NSH Patch in property value
                  Joe Piotrowski

                  I'm not sure if the * is required or not.

                  • 6. Re: NSH Patch in property value
                    Bill Robinson

                    the paths need to be nsh style here - /C/Program files/blah, not c:\program files if you are using them in a rule like '??PATH_PROPERTY??' directory exists.

                    1 of 1 people found this helpful
                    • 7. Re: NSH Patch in property value

                      Yes, it is working .. Thanks for your help..